Remote Code Execution Vulnerability in Request a Quote Form Plugin for WordPress
CVE-2025-8420
8.1HIGH
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 6 August 2025
What is CVE-2025-8420?
An issue has been identified in the Request a Quote Form plugin for WordPress, where improper validation of user input in the emd_form_builder_lite_pagenum function allows for Remote Code Execution. This vulnerability can be exploited by unauthenticated attackers to execute arbitrary code on the server, despite the inability to pass parameters to the invoked functions. Affected users are advised to upgrade to version 2.5.3 or later to mitigate potential risks.
Affected Version(s)
Request a Quote Form Plugin – Price Quote Request Management Made Easy * <= 2.5.2